Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 492
Alerts This Week
Warning Icon 1 492

Fedora 22: Critical Update for Dpkg Package Integrity and Format Issues

fedora
Calendar Grey May 8, 2015
Scroller Fedora
Tackling essential security concerns in Fedora 22's dpkg component via enhancements to verification protocols and format-related weaknesses.
Fix build for all versions, previous try wasn't correct and back with dpkg-perl-libexecdir.patch Revert location of dpkg/parsechangelog

Summary

This package contains the tools (including dpkg-source) required

to unpack, build and upload Debian source packages.

This package also contains the programs dpkg which used to handle the

installation and removal of packages on a Debian system.

This package also contains dselect, an interface for managing the

installation and removal of packages on the system.

dpkg and dselect will certainly be non-functional on a rpm-based system

because packages dependencies will likely be unmet.

Update Information:

Fix build for all versions, previous try wasn't correct and back with dpkg-perl-libexecdir.patch Revert location of dpkg/parsechangelog . Security fix for CVE-2014-8625 and Security fix for CVE-2015-0840 Security fix for CVE-2014-8625 and Security fix for CVE-2015-0840

Topics%20covered

Topics Covered

security advisory critical Fedora format string package management integrity check dpkg

Change Log

References


[ 1 ] Bug #1210748 - CVE-2015-0840 dpkg: source package integrity verification bypass https://bugzilla.redhat.com/show_bug.cgi?id=1210748 [ 2 ] Bug #1162166 - CVE-2014-8625 dpkg: format string vulnerability https://bugzilla.redhat.com/show_bug.cgi?id=1162166

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update dpkg' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: dpkg
Product: Fedora 22
Version: 1.16.16
Release: 5.fc22
URL: https://tracker.debian.org/pkg/dpkg
Summary: Package maintenance system for Debian Linux

Topics%20covered

Topics Covered

security advisory critical Fedora format string package management integrity check dpkg

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.